v0.9.0a9 — preview alpha

Published artifacts:

• PyPI: pip install --pre stigmem-py==0.9.0a9 (also: stigmem, stigmem-node, stigmem-openclaw)
• npm: npm install @eidetic-labs/stigmem-ts@0.9.0-alpha.9
• GHCR: docker pull ghcr.io/eidetic-labs/stigmem-node:0.9.0a9 (also :0.9.0-alpha.9)
• Supply-chain evidence: GHCR image is keyless-signed with Sigstore/cosign; SBOM and BuildKit provenance are attached as OCI referrers. Verification instructions: https://docs.stigmem.dev/operators/release-verification
• GPG signatures: The release tag is maintainer-signed. Detached artifact signatures may be uploaded manually after publication.

---

[0.9.0a9] — Unreleased

Changed

• Advanced live release-version surfaces toward v0.9.0a9 for the plugin
  discovery release line.
• Opened the post-v0.9.0a8 plugin publication readiness track, marked the
  alpha extraction train as complete through v0.9.0a8, and added the
  standalone experimental plugin publication contract.
• Added operator-facing plugin discovery surfaces: README plugin catalog,
  meta-package plugin extras, docs-site catalog pages, and stigmem plugins
  search/enable/disable/doctor CLI commands.
• Added MCP enablement surfaces: README editor integration table, docs-site
  MCP connector catalog, stigmem mcp doctor/detect/config/install/status/smoke
  CLI commands, and GET /v1/mcp/connectors catalog discovery.
• Added a structural guard that keeps README, PyPI extra definitions, and docs
  plugin catalog entries aligned for the six published experimental plugins.
• Added a structural guard that keeps README, adapter README, docs-site MCP
  connector pages, and the stigmem mcp editor catalog aligned.

Security

• Remediated qs CVE-2026-8723 / GHSA-q8mj-m7cp-5q26 in the documentation
  build toolchain by forcing qs>=6.15.2 in docs/package.json and refreshing
  docs/package-lock.json. The root pnpm workspace was already pinned to the
  patched qs@6.15.2 release.